Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/39614f517bde3fd9e357911289eb5765adf58126.roa
File: 39614f517bde3fd9e357911289eb5765adf58126.roa (raw, json)
Hash identifier: KJs7SIx2cy7xRJjozE4/pjiJSoMOgCcFw4XMvwcfLs8=
Subject key identifier: 23:82:08:0D:E1:79:72:CD:4A:4A:1E:47:94:91:43:AB:C6:0C:DB:98
Certificate issuer: /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial: 08D685
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/39614f517bde3fd9e357911289eb5765adf58126.roa
Signing time: Wed 30 Aug 2023 17:31:45 +0000
ROA not before: Tue 29 Aug 2023 17:31:45 +0000
ROA not after: Sat 30 Aug 2025 17:31:45 +0000
asID: 8163
IP address blocks: 190.1.128.0/18 maxlen: 24
201.220.64.0/19 maxlen: 24
190.182.0.0/17 maxlen: 24
200.89.96.0/19 maxlen: 24
186.121.0.0/17 maxlen: 24
2803:fd00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579205 (0x8d685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Validity
Not Before: Aug 29 17:31:45 2023 GMT
Not After : Aug 30 17:31:45 2025 GMT
Subject: CN=39614f517bde3fd9e357911289eb5765adf58126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:56:bb:dd:88:37:07:c7:19:de:e0:9d:27:
96:d8:d3:6c:6e:1a:c7:95:6f:73:42:37:e0:4f:be:
61:f2:35:25:14:e1:f3:df:87:14:6f:00:33:da:6b:
18:fa:78:93:c6:5b:fc:f7:b9:30:31:5a:f5:33:e4:
63:e4:e6:a3:d1:92:15:e0:70:a7:3c:70:2e:76:2f:
99:22:99:c0:e9:c3:af:d2:67:dc:de:c7:3f:ff:55:
93:9d:37:ec:93:fc:b6:36:4f:84:2f:1d:57:1e:7f:
e3:0a:b1:f9:1d:24:2e:2a:1f:5e:53:0e:c5:7d:f0:
75:43:fa:b4:8f:80:e5:d3:f7:89:68:b9:30:da:b2:
83:3d:82:f8:23:98:96:8d:9d:0b:c1:53:41:6c:14:
c8:d5:20:db:bc:d8:a1:b9:e8:98:d9:48:f8:8a:c5:
39:cf:e4:d8:06:6e:c6:55:4a:5d:98:11:ca:1e:45:
46:5b:78:f9:dc:ed:20:de:a4:a0:bb:ca:4b:76:f7:
b3:cb:df:09:a1:9b:53:b5:bb:ac:7b:e9:44:73:d0:
61:d5:2b:60:10:ab:ec:76:56:0a:91:ce:0c:d3:e1:
81:26:e0:49:62:9c:67:4a:92:83:db:45:6a:44:f1:
2e:fb:cd:c4:f3:26:f7:bb:a6:ef:29:c6:6a:a8:59:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:82:08:0D:E1:79:72:CD:4A:4A:1E:47:94:91:43:AB:C6:0C:DB:98
X509v3 Authority Key Identifier:
keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/39614f517bde3fd9e357911289eb5765adf58126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.121.0.0/17
190.1.128.0/18
190.182.0.0/17
200.89.96.0/19
201.220.64.0/19
IPv6:
2803:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
7a:b2:2e:c4:8c:59:50:66:15:f6:e3:6b:70:f4:91:25:c9:d3:
f6:83:92:20:46:8f:dd:80:bd:c5:2e:eb:b8:b1:8d:7c:5b:96:
ca:43:99:03:c3:e0:f4:4c:3d:4a:c5:69:bd:83:db:6f:c1:a0:
1d:86:f9:99:b7:4d:07:d3:9b:81:6a:65:f5:1d:7b:11:d5:a8:
4f:02:fb:25:80:9e:f4:96:dd:39:d4:03:51:9d:b1:5a:7c:10:
b9:94:27:f4:db:0c:d0:63:09:57:01:01:28:4e:ea:a0:c1:5b:
91:04:29:53:a2:3d:85:67:d3:fa:59:6f:c3:60:bd:ea:d0:77:
1f:c9:04:2f:9f:73:8a:b4:a3:e0:70:e7:9c:d1:75:fb:ba:68:
b9:87:42:12:0a:b1:7d:fa:1c:e4:c1:4b:50:18:1d:7f:71:fa:
a1:2d:4e:97:48:14:9e:d0:95:b7:90:73:14:7a:b9:b0:24:14:
89:50:40:0e:01:c6:04:bb:a4:08:4d:a8:a8:56:b8:cf:ba:3a:
b2:c9:a9:a2:14:32:20:67:ab:aa:1d:c3:f1:80:da:59:24:75:
34:83:9d:18:cc:1f:81:05:c8:1f:e4:cf:09:ad:9b:b4:50:0b:
c8:44:8d:d0:a5:83:4b:45:2f:94:81:d5:da:63:b9:fa:b0:10:
81:4e:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org